From owner-freebsd-security@FreeBSD.ORG  Tue Jun 18 12:41:16 2013
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by hub.freebsd.org (Postfix) with ESMTP id 907AF9DF
 for <freebsd-security@freebsd.org>; Tue, 18 Jun 2013 12:41:16 +0000 (UTC)
 (envelope-from rwatson@FreeBSD.org)
Received: from cyrus.watson.org (cyrus.watson.org [198.74.231.69])
 by mx1.freebsd.org (Postfix) with ESMTP id 703C31791
 for <freebsd-security@freebsd.org>; Tue, 18 Jun 2013 12:41:16 +0000 (UTC)
Received: from fledge.watson.org (fledge.watson.org [198.74.231.63])
 by cyrus.watson.org (Postfix) with ESMTPS id EBC9346B52;
 Tue, 18 Jun 2013 08:41:15 -0400 (EDT)
Date: Tue, 18 Jun 2013 13:41:15 +0100 (BST)
From: Robert Watson <rwatson@FreeBSD.org>
X-X-Sender: robert@fledge.watson.org
To: Dewayne Geraghty <dewayne.geraghty@heuristicsystems.com.au>
Subject: RE: libarchive and MAC labels
In-Reply-To: <62DD3F47DDCD4105AC023171CCF8BDA2@white>
Message-ID: <alpine.BSF.2.00.1306181340470.15633@fledge.watson.org>
References: <alpine.LNX.2.03.1306101748380.429@chu>
 <62DD3F47DDCD4105AC023171CCF8BDA2@white>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: priit@cc.ttu.ee, freebsd-security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jun 2013 12:41:16 -0000


On Wed, 12 Jun 2013, Dewayne Geraghty wrote:

>> I've created a patch for libarchive that allows storing and restoring MAC 
>> labels from/to a multilabel filesystem using bsdtar. Now before going 
>> anywhere with this I had a few questions:

...

> Thank-you for addressing a significant backup/recovery shortcoming.
>
> I've used biba extensively, however if files/directories are backed-up with 
> MLS+biba and recovered in a biba only environment, that is the sysadmin 
> choice.  Warning messages are fine, but the restoration should continue (if 
> possible).

I'd also like to see this go back into libarchive; I suspect many people would 
find this useful.

Robert